date:20050528

#33169 [NEW]: ArrayAccess doesn't work at all

2005-05-28 Thread tomas_matousek at hotmail dot com

From: tomas_matousek at hotmail dot com
Operating system: WinXP
PHP version:  5.0.4
PHP Bug Type: Zend Engine 2 problem
Bug description:  ArrayAccess doesn't work at all

Description:

I looks like you have never do in-depth testing with ArrayAccess. I you
did you must realize many things are wrong there. It took me less then 5
minutes to kill PHP several times using this naively implemented feature.




Reproduce code:
---
class ArrayClass implements ArrayAccess {

public $a = array();

function offsetExists($index) {

return array_key_exists($index, $this->a);

}

function offsetGet($index) {

return $this->a[$index];

}

function offsetSet($index, $newval) {

return $this->a[$index] = $newval;

}

function offsetUnset($index) {

unset($this->a[$index]);

}

}



Expected result:

It's unclear for me what should I expect.
Definitly not the crashes.

Can anyone explain, what should I expect from e.g.
$obj[1][2][3] = 1; ?

And what should 
$a =& $obj[1][2][3];
do?


Actual result:
--
$obj[array()] = 1; // crash
$obj[][] = 1;  // crash
$x =& $obj[1]  // crash
$obj[$obj[1]] = 1; // if offsetGet() returns null, the offsetSet() is
called then
$obj[1]++; // doesn't work at all even if both offsetGet and offsetSet are
modified to return by reference

-- 
Edit bug report at http://bugs.php.net/?id=33169&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33169&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33169&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33169&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33169&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33169&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33169&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33169&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33169&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33169&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33169&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33169&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33169&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33169&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33169&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33169&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33169&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33169&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33169&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33169&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33169&r=mysqlcfg

#33169 [Opn]: ArrayAccess doesn't work at all

2005-05-28 Thread tomas_matousek at hotmail dot com

 ID:   33169
 User updated by:  tomas_matousek at hotmail dot com
 Reported By:  tomas_matousek at hotmail dot com
 Status:   Open
 Bug Type: Zend Engine 2 problem
 Operating System: WinXP
 PHP Version:  5.0.4
 New Comment:

I'm sorry for mystifying with:
$obj[][] = 1;  
it doesn't crash yet reports strange error even if I return an array by
reference from offsetGet():
Fatal error:  Objects used as arrays in post/pre increment/decrement
must return values by reference in C:\Web\$PhpTests\y.php on line 32.

this also works fine:
$obj[$obj[1]] = 1;

but others don't



$obj[$obj[1]] = 1;


Previous Comments:


[2005-05-28 10:09:46] tomas_matousek at hotmail dot com

Description:

I looks like you have never do in-depth testing with ArrayAccess. I you
did you must realize many things are wrong there. It took me less then 5
minutes to kill PHP several times using this naively implemented
feature.




Reproduce code:
---
class ArrayClass implements ArrayAccess {

public $a = array();

function offsetExists($index) {

return array_key_exists($index, $this->a);

}

function offsetGet($index) {

return $this->a[$index];

}

function offsetSet($index, $newval) {

return $this->a[$index] = $newval;

}

function offsetUnset($index) {

unset($this->a[$index]);

}

}



Expected result:

It's unclear for me what should I expect.
Definitly not the crashes.

Can anyone explain, what should I expect from e.g.
$obj[1][2][3] = 1; ?

And what should 
$a =& $obj[1][2][3];
do?


Actual result:
--
$obj[array()] = 1; // crash
$obj[][] = 1;  // crash
$x =& $obj[1]  // crash
$obj[$obj[1]] = 1; // if offsetGet() returns null, the offsetSet() is
called then
$obj[1]++; // doesn't work at all even if both offsetGet and offsetSet
are modified to return by reference





-- 
Edit this bug report at http://bugs.php.net/?id=33169&edit=1

#32979 [Fbk->Opn]: socket stream opened with stream_socket_client doesnt work with stream_select

2005-05-28 Thread mjpph at stardust dot fi

 ID:   32979
 User updated by:  mjpph at stardust dot fi
 Reported By:  mjpph at stardust dot fi
-Status:   Feedback
+Status:   Open
 Bug Type: Network related
 Operating System: Linux (Fedora Core 3)
 PHP Version:  5CVS-2005-05-08 (dev)
 Assigned To:  wez
 New Comment:

Sure thing, just tell me what to do. I've never even heard of valgrind
before, but it seems FC3 comes with one.


Previous Comments:


[2005-05-28 04:39:07] [EMAIL PROTECTED]

That's the missing piece of the puzzle.
openssl replaces the default tcp transport, but passes through to the
default when you don't request ssl.
So, the behaviour should be identical.

Can you run the openssl enabled version under valgrind for me, to see
if something is misbehaving?
It'll give me a headstart when I sit down to solve the problem in the
morning.

Thanks.



[2005-05-27 22:05:33] mjpph at stardust dot fi

It's too bad that the openssl screws up the stream_select or
stream_socket_client in some weird way as I intended to use
stream_socket_enable_crypto() with the stream_socket_client() and it's
dependant of openssl.



[2005-05-27 21:52:35] mjpph at stardust dot fi

The strangest thing.. I had time to do some test compiles with the
200505260030 snapshot and I got some working. I took my usual
parameters off from configure one by one, after I removed
--with-openssl the script started suddenly working. Then I did test
compile with ./configure --with-openssl and without any parameters. The
one --with-openssl failed the script and the one without it worked just
fine. It seems that the openssl support does some havoc which causes
the failures. I did proper make clean / make distclean between the
compiles and doublechecked the results. Linux is a Fedora Core 3,
standard install with development support enabled.

The test script is as follows, the host machine has sendmail running as
a test service.



Strace from the working PHP (without any configure parameters):

read(3, "http://bugs.php.net/32979

-- 
Edit this bug report at http://bugs.php.net/?id=32979&edit=1

#32979 [Opn]: socket stream opened with stream_socket_client doesnt work with stream_select

2005-05-28 Thread mjpph at stardust dot fi

 ID:   32979
 User updated by:  mjpph at stardust dot fi
 Reported By:  mjpph at stardust dot fi
 Status:   Open
 Bug Type: Network related
 Operating System: Linux (Fedora Core 3)
 PHP Version:  5CVS-2005-05-08 (dev)
 Assigned To:  wez
 New Comment:

I guess you need valgrind --tool=callgrind. Also on another matter, I'm
unable to compile the newest CVS on FC3. I get this error even without
any configure options : libtool: link: `ext/libxml/libxml.lo' is not a
valid libtool object.


Previous Comments:


[2005-05-28 11:03:00] mjpph at stardust dot fi

Sure thing, just tell me what to do. I've never even heard of valgrind
before, but it seems FC3 comes with one.



[2005-05-28 04:39:07] [EMAIL PROTECTED]

That's the missing piece of the puzzle.
openssl replaces the default tcp transport, but passes through to the
default when you don't request ssl.
So, the behaviour should be identical.

Can you run the openssl enabled version under valgrind for me, to see
if something is misbehaving?
It'll give me a headstart when I sit down to solve the problem in the
morning.

Thanks.



[2005-05-27 22:05:33] mjpph at stardust dot fi

It's too bad that the openssl screws up the stream_select or
stream_socket_client in some weird way as I intended to use
stream_socket_enable_crypto() with the stream_socket_client() and it's
dependant of openssl.



[2005-05-27 21:52:35] mjpph at stardust dot fi

The strangest thing.. I had time to do some test compiles with the
200505260030 snapshot and I got some working. I took my usual
parameters off from configure one by one, after I removed
--with-openssl the script started suddenly working. Then I did test
compile with ./configure --with-openssl and without any parameters. The
one --with-openssl failed the script and the one without it worked just
fine. It seems that the openssl support does some havoc which causes
the failures. I did proper make clean / make distclean between the
compiles and doublechecked the results. Linux is a Fedora Core 3,
standard install with development support enabled.

The test script is as follows, the host machine has sendmail running as
a test service.



Strace from the working PHP (without any configure parameters):

read(3, "http://bugs.php.net/32979

-- 
Edit this bug report at http://bugs.php.net/?id=32979&edit=1

#32979 [Opn]: socket stream opened with stream_socket_client doesnt work with stream_select

2005-05-28 Thread mjpph at stardust dot fi

 ID:   32979
 User updated by:  mjpph at stardust dot fi
 Reported By:  mjpph at stardust dot fi
 Status:   Open
 Bug Type: Network related
 Operating System: Linux (Fedora Core 3)
 PHP Version:  5CVS-2005-05-08 (dev)
 Assigned To:  wez
 New Comment:

A problem. I'm running x86_64 FC3 and PHP and valgrind seems to be able
to do 32bit executables only.


Previous Comments:


[2005-05-28 11:06:46] mjpph at stardust dot fi

I guess you need valgrind --tool=callgrind. Also on another matter, I'm
unable to compile the newest CVS on FC3. I get this error even without
any configure options : libtool: link: `ext/libxml/libxml.lo' is not a
valid libtool object.



[2005-05-28 11:03:00] mjpph at stardust dot fi

Sure thing, just tell me what to do. I've never even heard of valgrind
before, but it seems FC3 comes with one.



[2005-05-28 04:39:07] [EMAIL PROTECTED]

That's the missing piece of the puzzle.
openssl replaces the default tcp transport, but passes through to the
default when you don't request ssl.
So, the behaviour should be identical.

Can you run the openssl enabled version under valgrind for me, to see
if something is misbehaving?
It'll give me a headstart when I sit down to solve the problem in the
morning.

Thanks.



[2005-05-27 22:05:33] mjpph at stardust dot fi

It's too bad that the openssl screws up the stream_select or
stream_socket_client in some weird way as I intended to use
stream_socket_enable_crypto() with the stream_socket_client() and it's
dependant of openssl.



[2005-05-27 21:52:35] mjpph at stardust dot fi

The strangest thing.. I had time to do some test compiles with the
200505260030 snapshot and I got some working. I took my usual
parameters off from configure one by one, after I removed
--with-openssl the script started suddenly working. Then I did test
compile with ./configure --with-openssl and without any parameters. The
one --with-openssl failed the script and the one without it worked just
fine. It seems that the openssl support does some havoc which causes
the failures. I did proper make clean / make distclean between the
compiles and doublechecked the results. Linux is a Fedora Core 3,
standard install with development support enabled.

The test script is as follows, the host machine has sendmail running as
a test service.



Strace from the working PHP (without any configure parameters):

read(3, "http://bugs.php.net/32979

-- 
Edit this bug report at http://bugs.php.net/?id=32979&edit=1

#33169 [Opn->Fbk]: ArrayAccess doesn't work at all

2005-05-28 Thread tony2001

 ID:   33169
 Updated by:   [EMAIL PROTECTED]
 Reported By:  tomas_matousek at hotmail dot com
-Status:   Open
+Status:   Feedback
 Bug Type: Zend Engine 2 problem
 Operating System: WinXP
 PHP Version:  5.0.4
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php5-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.0-win32-latest.zip

Can't reproduce any of these problems with latest CVS (of course, if
"Warning: Illegal offset type" is not a mentined "crash").



Previous Comments:


[2005-05-28 10:20:56] tomas_matousek at hotmail dot com

I'm sorry for mystifying with:
$obj[][] = 1;  
it doesn't crash yet reports strange error even if I return an array by
reference from offsetGet():
Fatal error:  Objects used as arrays in post/pre increment/decrement
must return values by reference in C:\Web\$PhpTests\y.php on line 32.

this also works fine:
$obj[$obj[1]] = 1;

but others don't



$obj[$obj[1]] = 1;



[2005-05-28 10:09:46] tomas_matousek at hotmail dot com

Description:

I looks like you have never do in-depth testing with ArrayAccess. I you
did you must realize many things are wrong there. It took me less then 5
minutes to kill PHP several times using this naively implemented
feature.




Reproduce code:
---
class ArrayClass implements ArrayAccess {

public $a = array();

function offsetExists($index) {

return array_key_exists($index, $this->a);

}

function offsetGet($index) {

return $this->a[$index];

}

function offsetSet($index, $newval) {

return $this->a[$index] = $newval;

}

function offsetUnset($index) {

unset($this->a[$index]);

}

}



Expected result:

It's unclear for me what should I expect.
Definitly not the crashes.

Can anyone explain, what should I expect from e.g.
$obj[1][2][3] = 1; ?

And what should 
$a =& $obj[1][2][3];
do?


Actual result:
--
$obj[array()] = 1; // crash
$obj[][] = 1;  // crash
$x =& $obj[1]  // crash
$obj[$obj[1]] = 1; // if offsetGet() returns null, the offsetSet() is
called then
$obj[1]++; // doesn't work at all even if both offsetGet and offsetSet
are modified to return by reference





-- 
Edit this bug report at http://bugs.php.net/?id=33169&edit=1

#32979 [Opn]: socket stream opened with stream_socket_client doesnt work with stream_select

2005-05-28 Thread mjpph at stardust dot fi

 ID:   32979
 User updated by:  mjpph at stardust dot fi
 Reported By:  mjpph at stardust dot fi
 Status:   Open
 Bug Type: Network related
 Operating System: Linux (Fedora Core 3)
 PHP Version:  5CVS-2005-05-08 (dev)
 Assigned To:  wez
 New Comment:

Looks like this might also be a x86_64 problem. As I compiled the same
exact version on i386 FC3 and got it working even with openssl compiled
in.


Previous Comments:


[2005-05-28 11:37:29] mjpph at stardust dot fi

A problem. I'm running x86_64 FC3 and PHP and valgrind seems to be able
to do 32bit executables only.



[2005-05-28 11:06:46] mjpph at stardust dot fi

I guess you need valgrind --tool=callgrind. Also on another matter, I'm
unable to compile the newest CVS on FC3. I get this error even without
any configure options : libtool: link: `ext/libxml/libxml.lo' is not a
valid libtool object.



[2005-05-28 11:03:00] mjpph at stardust dot fi

Sure thing, just tell me what to do. I've never even heard of valgrind
before, but it seems FC3 comes with one.



[2005-05-28 04:39:07] [EMAIL PROTECTED]

That's the missing piece of the puzzle.
openssl replaces the default tcp transport, but passes through to the
default when you don't request ssl.
So, the behaviour should be identical.

Can you run the openssl enabled version under valgrind for me, to see
if something is misbehaving?
It'll give me a headstart when I sit down to solve the problem in the
morning.

Thanks.



[2005-05-27 22:05:33] mjpph at stardust dot fi

It's too bad that the openssl screws up the stream_select or
stream_socket_client in some weird way as I intended to use
stream_socket_enable_crypto() with the stream_socket_client() and it's
dependant of openssl.



The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/32979

-- 
Edit this bug report at http://bugs.php.net/?id=32979&edit=1

#33170 [NEW]: IPv6: gethostbyname() fails on resolving IPv6 hostnames

2005-05-28 Thread web at vollbrecht dot net

From: web at vollbrecht dot net
Operating system: Linux 2.6.10-1
PHP version:  4.3.10
PHP Bug Type: Network related
Bug description:  IPv6: gethostbyname() fails on resolving IPv6 hostnames

Description:

perhaps related to #12678.

gethostbyname() gives the IPv6 hostname back instead if the IPv6 ip. In
IPv4 everything works fine.

Note: IPs and hostnames in the following snipplets are replaced with
example entries. It was tested with working IPs both in IPv4 and IPv6.

Reproduce code:
---
$client_ip = $_SERVER["REMOTE_ADDR"];
$client_hostname = gethostbyaddr($_SERVER["REMOTE_ADDR"]);
$client_hostname2ip =
gethostbyname(gethostbyaddr($_SERVER["REMOTE_ADDR"]));

echo $client_ip."->".$client_hostname."->".$client_hostname2ip;

Expected result:

In IPv4:
10.11.12.13->server.domain.de->10.11.12.13 

In IPv6:
3ffe:1::1->server.ipv6.domain.de->3ffe:1::1

Actual result:
--
In IPv4 (working fine): 10.11.12.13->server.domain.de->10.11.12.13 

In IPv6 (last output broken):
3ffe:1::1->server.ipv6.domain.de->server.ipv6.domain.de

-- 
Edit bug report at http://bugs.php.net/?id=33170&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33170&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33170&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33170&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33170&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33170&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33170&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33170&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33170&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33170&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33170&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33170&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33170&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33170&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33170&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33170&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33170&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33170&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33170&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33170&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33170&r=mysqlcfg

#33169 [Fbk->Bgs]: ArrayAccess doesn't work at all

2005-05-28 Thread tomas_matousek at hotmail dot com

 ID:   33169
 User updated by:  tomas_matousek at hotmail dot com
 Reported By:  tomas_matousek at hotmail dot com
-Status:   Feedback
+Status:   Bogus
 Bug Type: Zend Engine 2 problem
 Operating System: WinXP
 PHP Version:  5.0.4
 New Comment:

Sorry for confusing report. I've tested in on 5.0.3 instead of 5.0.4.
In the previous version, almost nothing has worked. In 5.0.4. it seems
to be ok.
So this is a bogus, sorry for that.


Previous Comments:


[2005-05-28 11:46:50] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.0-win32-latest.zip

Can't reproduce any of these problems with latest CVS (of course, if
"Warning: Illegal offset type" is not a mentined "crash").




[2005-05-28 10:20:56] tomas_matousek at hotmail dot com

I'm sorry for mystifying with:
$obj[][] = 1;  
it doesn't crash yet reports strange error even if I return an array by
reference from offsetGet():
Fatal error:  Objects used as arrays in post/pre increment/decrement
must return values by reference in C:\Web\$PhpTests\y.php on line 32.

this also works fine:
$obj[$obj[1]] = 1;

but others don't



$obj[$obj[1]] = 1;



[2005-05-28 10:09:46] tomas_matousek at hotmail dot com

Description:

I looks like you have never do in-depth testing with ArrayAccess. I you
did you must realize many things are wrong there. It took me less then 5
minutes to kill PHP several times using this naively implemented
feature.




Reproduce code:
---
class ArrayClass implements ArrayAccess {

public $a = array();

function offsetExists($index) {

return array_key_exists($index, $this->a);

}

function offsetGet($index) {

return $this->a[$index];

}

function offsetSet($index, $newval) {

return $this->a[$index] = $newval;

}

function offsetUnset($index) {

unset($this->a[$index]);

}

}



Expected result:

It's unclear for me what should I expect.
Definitly not the crashes.

Can anyone explain, what should I expect from e.g.
$obj[1][2][3] = 1; ?

And what should 
$a =& $obj[1][2][3];
do?


Actual result:
--
$obj[array()] = 1; // crash
$obj[][] = 1;  // crash
$x =& $obj[1]  // crash
$obj[$obj[1]] = 1; // if offsetGet() returns null, the offsetSet() is
called then
$obj[1]++; // doesn't work at all even if both offsetGet and offsetSet
are modified to return by reference





-- 
Edit this bug report at http://bugs.php.net/?id=33169&edit=1

#33171 [NEW]: foreach enumerates private fields declared in base classes

2005-05-28 Thread ladislav dot prosek at matfyz dot cz

From: ladislav dot prosek at matfyz dot cz
Operating system: Win XP Pro SP2
PHP version:  5.0.4
PHP Bug Type: Zend Engine 2 problem
Bug description:  foreach enumerates private fields declared in base classes

Description:

Using foreach on $this results in enumerating not only visible fields
(i.e. public and protected field declared along the inheritance hierarchy
+ private fields declared in current class) but also all private fields
declared along the inheritance hierarchy. This is wrong since those fields
are not visible and should not be accessible.

By the way, the foreach documentation page still says "foreach works only
on arrays...". Perhaps you should consider updating it ;-)

Reproduce code:
---
class A
{
private $c = "A's c";
}

class B extends A
{
private $c = "B's c";

public function go()
{
foreach ($this as $key => $val)
{
echo "$key => $val\n";
}
}
};

$x = new B;
$x->go();

Expected result:

c => B's c


Actual result:
--
c => B's c
c => A's c


-- 
Edit bug report at http://bugs.php.net/?id=33171&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33171&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33171&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33171&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33171&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33171&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33171&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33171&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33171&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33171&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33171&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33171&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33171&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33171&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33171&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33171&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33171&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33171&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33171&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33171&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33171&r=mysqlcfg

#33172 [NEW]: changing array during foreach iteration

2005-05-28 Thread tomas_matousek at hotmail dot com

From: tomas_matousek at hotmail dot com
Operating system: WinXP
PHP version:  5.0.4
PHP Bug Type: Scripting Engine problem
Bug description:  changing array during foreach iteration

Description:

The behavior of foreach statment with reference value is not imho right if
the array gets modified during iteration.

See the code I've pasted here. If the array is written to (either by unset
or by a write operation) during iteration, the effect of & is canceled,
i.e. the values are not modified since the write operation.

This seems to me as bug because it is inconsistent with the "definition"
of foreach which should say that

foreach($a as $k => $v) {}

is (more or less) equivalent to 

$copy_of_a = $a;
while(next($copy_of_a))
{
  $k = key($copy_of_a);
  $v = $copy_of_a[$k];
}

With the &, one can deduce the following "definition":

foreach($a as $k =>& $v)  { }

is equivalent to 

$copy_of_a = $a;
while(next($copy_of_a))
{
  $k = key($copy_of_a);
  $v =& $a[$k];
}

Using =& operator, a new value should be added if it has been unset in the
original array.

Reproduce code:
---
$a = array(0,1,2,3,4,5,6,7,8);
$i = 0;
foreach ($a as $k =>& $v)
{
  $v+=100;

  if ($i++==2)
  {
unset($a[5]);
  }
}
var_dump($a);

Expected result:

array(8) {
  [0]=>
  int(100)
  [1]=>
  int(101)
  [2]=>
  int(102)
  [3]=>
  int(3)  // modification of values stops here
  [4]=>
  int(4)
  [6]=>
  int(6)
  [7]=>
  int(7)
  [8]=>
  int(8)
}



Actual result:
--
array(8) {
  [0]=>
  int(100)
  [1]=>
  int(101)
  [2]=>
  int(102)
  [3]=>
  int(103)
  [4]=>
  int(104)
  [6]=>
  int(106)
  [7]=>
  int(107)
  [8]=>
  int(108)
  [5]=>// note: the new value should be added here
  int(100)
}



-- 
Edit bug report at http://bugs.php.net/?id=33172&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33172&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33172&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33172&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33172&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33172&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33172&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33172&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33172&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33172&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33172&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33172&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33172&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33172&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33172&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33172&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33172&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33172&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33172&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33172&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33172&r=mysqlcfg

#33172 [Opn]: changing array during foreach iteration

2005-05-28 Thread tomas_matousek at hotmail dot com

 ID:   33172
 User updated by:  tomas_matousek at hotmail dot com
 Reported By:  tomas_matousek at hotmail dot com
 Status:   Open
 Bug Type: Scripting Engine problem
 Operating System: WinXP
 PHP Version:  5.0.4
 New Comment:

Well, I've swapped the expected and the actual results.
I would expect all values of the array to be modified.


Previous Comments:


[2005-05-28 16:24:41] tomas_matousek at hotmail dot com

Description:

The behavior of foreach statment with reference value is not imho right
if the array gets modified during iteration.

See the code I've pasted here. If the array is written to (either by
unset or by a write operation) during iteration, the effect of & is
canceled, i.e. the values are not modified since the write operation.

This seems to me as bug because it is inconsistent with the
"definition" of foreach which should say that

foreach($a as $k => $v) {}

is (more or less) equivalent to 

$copy_of_a = $a;
while(next($copy_of_a))
{
  $k = key($copy_of_a);
  $v = $copy_of_a[$k];
}

With the &, one can deduce the following "definition":

foreach($a as $k =>& $v)  { }

is equivalent to 

$copy_of_a = $a;
while(next($copy_of_a))
{
  $k = key($copy_of_a);
  $v =& $a[$k];
}

Using =& operator, a new value should be added if it has been unset in
the original array.

Reproduce code:
---
$a = array(0,1,2,3,4,5,6,7,8);
$i = 0;
foreach ($a as $k =>& $v)
{
  $v+=100;

  if ($i++==2)
  {
unset($a[5]);
  }
}
var_dump($a);

Expected result:

array(8) {
  [0]=>
  int(100)
  [1]=>
  int(101)
  [2]=>
  int(102)
  [3]=>
  int(3)  // modification of values stops here
  [4]=>
  int(4)
  [6]=>
  int(6)
  [7]=>
  int(7)
  [8]=>
  int(8)
}



Actual result:
--
array(8) {
  [0]=>
  int(100)
  [1]=>
  int(101)
  [2]=>
  int(102)
  [3]=>
  int(103)
  [4]=>
  int(104)
  [6]=>
  int(106)
  [7]=>
  int(107)
  [8]=>
  int(108)
  [5]=>// note: the new value should be added here
  int(100)
}







-- 
Edit this bug report at http://bugs.php.net/?id=33172&edit=1

#33173 [NEW]: Bug in PHP 4.3.11 display_error.

2005-05-28 Thread max at jestsuper dot pl

From: max at jestsuper dot pl
Operating system: FreeBSD
PHP version:  4.3.11
PHP Bug Type: *General Issues
Bug description:  Bug in PHP 4.3.11 display_error.

Description:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Author: cXIb8O3(Maksymilian Arciemowicz)
Date: 28.5.2005
from securityreason.com TEAM

- --- 0. Bug in PHP 4.3.11 display_error. ---

This bug can be danger, because someone can do xss and Phishing attack.
Problem exist in display_errors..

Example php script:



and now request is

?varible=XXX

so can we see any error.

- ---
Warning: main(XXX): failed to open stream: No such file or directory in
/www/dupa.php on line 2

Warning: main(): Failed opening 'XXX' for inclusion (include_path='.:') in
/www/dupa.php on line 2
- ---

Normal. But now varible have for example SR
And error messages is:

- ---
Warning: main(
SR
): failed to open stream: No such file or directory in /www/dupa.php on
line 2

Warning: main(): Failed opening 'SR' for inclusion
(include_path='.:') in /www/dupa.php on line 2
- ---

So XSS...

Danger can be tag  , because you can see cookies etc.
For example.

?varible=<script>alert(document.cookie);

And have you cookies from this domain!

This XSS is critical, because exist in display_error and hacker can do XSS
and Phishing attack.
For example, if this bug exist in a Bank site... hacker can create 
or mirror site...

- --- 1.Contact ---
Author: Maksymilian Arciemowicz < cXIb8O3 >
Email: max [at] jestsuper [dot] pl or cxib [at] securityreason [dot] com
GPG-KEY: securityreason.com TEAM
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (FreeBSD)

iD8DBQFCmIWvznmvyJCR4zQRAuqtAKCcyXWQnMdPvCn+6+npQiGEbXvAZwCgq172
+J8w9EzGFE49sXxP1MPbSfI=
=QksY
-END PGP SIGNATURE-


Actual result:
--
XSS

-- 
Edit bug report at http://bugs.php.net/?id=33173&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33173&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33173&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33173&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33173&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33173&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33173&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33173&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33173&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33173&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33173&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33173&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33173&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33173&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33173&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33173&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33173&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33173&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33173&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33173&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33173&r=mysqlcfg

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65409.html">#33173 [Opn-&gt;Bgs]: Bug in PHP 4.3.11 display_error.</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333173+%5C%5BOpn%5C-%3EBgs%5C%5D%5C%3A+Bug+in+PHP+4.3.11+display_error.%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22helly%22&amp;o=newest&amp;f=1">helly</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
 ID:   33173
 Updated by:   [EMAIL PROTECTED]
 Reported By:  max at jestsuper dot pl
-Status:   Open
+Status:   Bogus
 Bug Type: *General Issues
-Operating System: FreeBSD
+Operating System: *
-PHP Version:  4.3.11
+PHP Version:  *
 New Comment:

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

You're not supposed to pass the error information to your users. Show
erros is only a convenience thing to aid you while developing. Thus no
user will ever see such error messages. So in the end it is not usable
for phishing and alike.


Previous Comments:


[2005-05-28 16:57:51] max at jestsuper dot pl

Description:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Author: cXIb8O3(Maksymilian Arciemowicz)
Date: 28.5.2005
from securityreason.com TEAM

- --- 0. Bug in PHP 4.3.11 display_error. ---

This bug can be danger, because someone can do xss and Phishing
attack.
Problem exist in display_errors..

Example php script:



and now request is

?varible=XXX

so can we see any error.

- ---
Warning: main(XXX): failed to open stream: No such file or directory in
/www/dupa.php on line 2

Warning: main(): Failed opening 'XXX' for inclusion (include_path='.:')
in /www/dupa.php on line 2
- ---

Normal. But now varible have for example SR
And error messages is:

- ---
Warning: main(
SR
): failed to open stream: No such file or directory in /www/dupa.php on
line 2

Warning: main(): Failed opening 'SR' for inclusion
(include_path='.:') in /www/dupa.php on line 2
- ---

So XSS...

Danger can be tag  <iframe>, because you can see cookies etc.
For example.

?varible=<script>alert(document.cookie);

And have you cookies from this domain!

This XSS is critical, because exist in display_error and hacker can do
XSS and Phishing attack.
For example, if this bug exist in a Bank site... hacker can create
 or mirror site...

- --- 1.Contact ---
Author: Maksymilian Arciemowicz < cXIb8O3 >
Email: max [at] jestsuper [dot] pl or cxib [at] securityreason [dot]
com
GPG-KEY: securityreason.com TEAM
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (FreeBSD)

iD8DBQFCmIWvznmvyJCR4zQRAuqtAKCcyXWQnMdPvCn+6+npQiGEbXvAZwCgq172
+J8w9EzGFE49sXxP1MPbSfI=
=QksY
-END PGP SIGNATURE-


Actual result:
--
XSS





-- 
Edit this bug report at http://bugs.php.net/?id=33173&edit=1

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65410.html">#33167 [Opn]: pg_fetch_array can cause a segfault</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333167+%5C%5BOpn%5C%5D%5C%3A+pg_fetch_array+can+cause+a+segfault%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22jsnell+at+networkninja+dot+com%22&amp;o=newest&amp;f=1">jsnell at networkninja dot com</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
 ID:   33167
 User updated by:  jsnell at networkninja dot com
 Reported By:  jsnell at networkninja dot com
 Status:   Open
 Bug Type: PostgreSQL related
 Operating System: Debian (dotdeb), gentoo
 PHP Version:  5.0.4
 New Comment:

works fine with PHP Version 5.1.0-dev in both cgi and mod forms.


Previous Comments:


[2005-05-28 04:47:26] jsnell at networkninja dot com

No segfault with the --enable-debug

Instead I get:

/usr/src/php5-src/php5-5.0.4/ext/pgsql/pgsql.c(1440) :  Freeing
0x0856003C (16 bytes), script=breaker.php
=== Total 1 memory leaks detected ===

which is:
/usr/src/php5-src/php5-5.0.4/ext/pgsql/pgsql.c


Also, if the value is manipulated or copied in any way such as casting
to int and then recasting to float, the problem seems to go away.



[2005-05-28 01:07:20] [EMAIL PROTECTED]

Also, try it with the latest snapshot available at http://snaps.php.net



[2005-05-28 01:05:42] [EMAIL PROTECTED]

Please compile PHP with --enable-debug and generate GDB backtrace once
more.



[2005-05-28 00:59:29] jsnell at networkninja dot com

Description:

Calling pg_fetch_array() with the results of a division followed by
calling it with a constant causes a segfault.  I have confirmed it in
both cgi and mod php 5.0.4 and also in cgi php 5.0.3.

Reproduce code:
---
// need a valid database to connect to
// contents don't matter
$query = 'select 1 as one';

$db_user = "your_user";
$db_password =  "your_pass";
$db_name = "your_db";
$db_port = 5432;

$connect_string =  "user=$db_user " .
"password=$db_password " .
"port=$db_port ".
"dbname=$db_name";
$db_link = pg_connect($connect_string);

$result = pg_exec($db_link, $query);

$i = floor(4/5);
$data =  pg_fetch_array($result, $i);

$i = 0;
$data = pg_fetch_array($result, $i);

echo("No segfault");


Expected result:

No segfault

Actual result:
--
gdb backtrace:

#0  0x0820cf3b in _zend_hash_index_update_or_next_insert ()
#1  0x08209c53 in add_index_stringl ()
#2  0x406bee43 in zif_pg_fetch_result () from
/usr/lib/php5/20041030/pgsql.so
#3  0x406bf10f in zif_pg_fetch_array () from
/usr/lib/php5/20041030/pgsql.so
#4  0x0823c4da in zend_do_fcall_common_helper ()
#5  0x0823cb11 in zend_do_fcall_handler ()
#6  0x08224cb5 in execute ()
#7  0x08207e28 in zend_execute_scripts ()
#8  0x081d8bca in php_execute_script ()
#9  0x0824c3f4 in main ()






-- 
Edit this bug report at http://bugs.php.net/?id=33167&edit=1

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65411.html">#33170 [Opn-&gt;Bgs]: IPv6: gethostbyname() fails on resolving IPv6 hostnames</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333170+%5C%5BOpn%5C-%3EBgs%5C%5D%5C%3A+IPv6%5C%3A+gethostbyname%5C%28%5C%29+fails+on+resolving+IPv6+hostnames%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22wez%22&amp;o=newest&amp;f=1">wez</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
 ID:   33170
 Updated by:   [EMAIL PROTECTED]
 Reported By:  web at vollbrecht dot net
-Status:   Open
+Status:   Bogus
 Bug Type: Network related
 Operating System: Linux 2.6.10-1
 PHP Version:  4.3.10
 New Comment:

gethostbyname() is an IPv4 only function.
inet_pton and inet_ntop are possible alternatives that are available in
PHP 5.



Previous Comments:


[2005-05-28 13:25:15] web at vollbrecht dot net

Description:

perhaps related to #12678.

gethostbyname() gives the IPv6 hostname back instead if the IPv6 ip. In
IPv4 everything works fine.

Note: IPs and hostnames in the following snipplets are replaced with
example entries. It was tested with working IPs both in IPv4 and IPv6.

Reproduce code:
---
$client_ip = $_SERVER["REMOTE_ADDR"];
$client_hostname = gethostbyaddr($_SERVER["REMOTE_ADDR"]);
$client_hostname2ip =
gethostbyname(gethostbyaddr($_SERVER["REMOTE_ADDR"]));

echo $client_ip."->".$client_hostname."->".$client_hostname2ip;

Expected result:

In IPv4:
10.11.12.13->server.domain.de->10.11.12.13 

In IPv6:
3ffe:1::1->server.ipv6.domain.de->3ffe:1::1

Actual result:
--
In IPv4 (working fine): 10.11.12.13->server.domain.de->10.11.12.13 

In IPv6 (last output broken):
3ffe:1::1->server.ipv6.domain.de->server.ipv6.domain.de





-- 
Edit this bug report at http://bugs.php.net/?id=33170&edit=1

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65412.html">#31618 [Com]: is_readable() results based on ownership of calling script, not file</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2331618+%5C%5BCom%5C%5D%5C%3A+is_readable%5C%28%5C%29+results+based+on+ownership+of+calling+script%2C+not+file%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22r+dot+s+dot+a+dot+vandomburg+at+student+dot+utwente+dot+nl%22&amp;o=newest&amp;f=1">r dot s dot a dot vandomburg at student dot utwente dot nl</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
 ID:   31618
 Comment by:   r dot s dot a dot vandomburg at student dot utwente
   dot nl
 Reported By:  kibab at icehouse dot net
 Status:   Open
 Bug Type: Filesystem function related
 Operating System: redhat enterprise
 PHP Version:  5CVS-2005-03-14
 New Comment:

I've found this to "work" for me too on PHP 4.3.11 and FreeBSD
5.4-STABLE. It causes Smarty to break under safe_mode() with the
following file permissions:

PHP application:
drwxr-xr-x  root  wheel  /
drwxr-xr-x  root  wheel  /home
drwxr-xr-x  root  wheel  /home/incognito
drwxr-xr-x  incognito  incognito  /home/incognito/public_html
-rw-r--r--  incognito  incognito 
/home/incognito/public_html/index.php

Smarty installation:
drwxr-xr-x  root  wheel  /
drwxr-xr-x  root  wheel  /usr
drwxr-xr-x  root  wheel  /usr/local
drwxr-xr-x  root  wheel  /usr/local/share
drwxr-xr-x  root  wheel  /usr/local/share/smarty
-r--r--r--  root  wheel  /usr/local/share/smarty/Smarty.class.php
drwxr-xr-x  root  wheel  /usr/local/share/smarty/plugins
-r--r--r--  root  wheel  /usr/local/share/smarty/plugins/*

safe_mode_include_dir =
"/usr/local/share/pear:/usr/local/share/smarty"
include_path = ".:/usr/local/share/pear:/usr/local/share/smarty"

The problem here is that Smarty.class.php can be included but that it
fails when the Smarty internals try to is_readable() any of its
(default) plugins.

Workarounds:
- disable safe_mode
- or: chown -R incognito /usr/local/share/smarty


Previous Comments:


[2005-05-19 06:14:33] kibab at icehouse dot net

>From memory, all files were mode 664 and all directories 
had permissions of 775 being owned by root:root.  However, 
I no longer have that same structure to prove that.  If 
you like, I can setup an almost identical test case using 
the code that I included below (but using my new 
structure).



[2005-05-17 17:18:48] [EMAIL PROTECTED]

What are the permissions of all the directories in that path?
(/var/lib/php_packages/)



[2005-01-20 22:32:24] kibab at icehouse dot net

Maybe this isn't directly related, but  
fopen($myfilename,"r") also fails, even though  
include($myfilename) works.  Again, $myfilename is in the  
safe_mode_include_dir, so fopen should be able to open it.



[2005-01-19 23:05:35] kibab at icehouse dot net

Description:

is_readable($myfilename) in the repro code returns true if 
the script calling it is owned by root, but false if it is 
owned by someone else.

Permissions are:   
-rw-r--r--1 root root 5452 Jan 13  
13:02 /var/lib/php_packages/test_templ2.php   
drwxr-xr-x4 root root 4096 Jan 19  
08:19 /var/lib/php_packages   
drwxr-xr-x   27 root root 4096 Jan 12  
09:27 /var/lib   
drwxr-xr-x   24 root root 4096 Sep 22  
13:06 /var   
drwxr-xr-x   20 root root 4096 Oct 29 09:48 /   
  
Relevant Settings:  
include_path = 
".:/var/lib/php_packages:/var/lib/php_packages/pear"  
safe_mode = On  
safe_mode_gid = On  
safe_mode_include_dir = /var/lib/php_packages 

Reproduce code:
---
 test.php ###
$myfilename = '/var/lib/php_packages/test_templ2.php';
if (is_readable($myfilename)) {
echo "is_readable: $myfilename (true)";
} else {
echo "is_readable: $myfilename (false)";
}
include($myfilename);

### test_templ2.php ###
TESTING!


Expected result:

I would expect is_readable() to return true in both  
instances.  The uid/gid check shouldn't matter despite  
safe mode, as the file is in safe_mode_include_dir, and 
even if it wasn't, the is_readable documentation says that 
it does NOT take into account safe_mode restrictions. 

Actual result:
--
// When test.php has the following ownership:
$ ls -l test.php 
-rw-rw-r--1 root root  278 Jan 19 13:16
test.php

// I get the following output:
is_readable: /var/lib/php_packages/test_templ2.php (true)
TESTING!   
   
// When test.php has the following permissions:   
$ ls -l test.php
-rw-rw-r--1 dschlegel79 undergradadmiss  278 Jan   
19 13:16 test.php   
   
// I get the following output:   
is_readable: /var/lib/php_packages/test_templ2.php (false)
TESTING!  





-- 
Edit this bug report at http://bugs.php.net/?id=31618&edit=1

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65413.html">#33171 [Opn-&gt;Ver]: foreach enumerates private fields declared in base classes</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333171+%5C%5BOpn%5C-%3EVer%5C%5D%5C%3A+foreach+enumerates+private+fields+declared+in+base+classes%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22tony2001%22&amp;o=newest&amp;f=1">tony2001</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
 ID:   33171
 Updated by:   [EMAIL PROTECTED]
 Reported By:  ladislav dot prosek at matfyz dot cz
-Status:   Open
+Status:   Verified
 Bug Type: Zend Engine 2 problem
 Operating System: Win XP Pro SP2
 PHP Version:  5.0.4


Previous Comments:


[2005-05-28 14:39:46] ladislav dot prosek at matfyz dot cz

Description:

Using foreach on $this results in enumerating not only visible fields
(i.e. public and protected field declared along the inheritance
hierarchy + private fields declared in current class) but also all
private fields declared along the inheritance hierarchy. This is wrong
since those fields are not visible and should not be accessible.

By the way, the foreach documentation page still says "foreach works
only on arrays...". Perhaps you should consider updating it ;-)

Reproduce code:
---
class A
{
private $c = "A's c";
}

class B extends A
{
private $c = "B's c";

public function go()
{
foreach ($this as $key => $val)
{
echo "$key => $val\n";
}
}
};

$x = new B;
$x->go();

Expected result:

c => B's c


Actual result:
--
c => B's c
c => A's c






-- 
Edit this bug report at http://bugs.php.net/?id=33171&edit=1

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65414.html">#33174 [NEW]: Socket_Read() error</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333174+%5C%5BNEW%5C%5D%5C%3A+Socket_Read%5C%28%5C%29+error%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22donnib+at+gmail+dot+com%22&amp;o=newest&amp;f=1">donnib at gmail dot com</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
From: donnib at gmail dot com
Operating system: Windows XP sp2
PHP version:  5CVS-2005-05-28 (dev)
PHP Bug Type: Sockets related
Bug description:  Socket_Read() error

Description:

Hai

Socket_read() seems to be bugged on Win32 when you add PHP_NORMAL_READ as
parameter..

the script will execute just fine until you connect to it with telnet..





Reproduce code:
---
the soruce code can be found at http://dk2.php.net/sockets

example 1. line 37

if (false === ( $buf = socket_read($msgsock, 2048, PHP_NORMAL_READ) ) ) {

Expected result:

i had expected it to work like it says in the documention



Actual result:
--
When you do so, it will give an error, saying: socket_read() failed:
reason: Forkert funktion.

"Forkert funktion" translate into Wrong Function..

-- 
Edit bug report at http://bugs.php.net/?id=33174&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33174&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33174&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33174&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33174&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33174&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33174&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33174&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33174&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33174&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33174&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33174&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33174&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33174&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33174&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33174&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33174&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33174&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33174&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33174&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33174&r=mysqlcfg

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65415.html">#33175 [NEW]: cant cross compiling arm linux</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333175+%5C%5BNEW%5C%5D%5C%3A+cant+cross+compiling+arm+linux%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22esteban+at+correo+dot+unam+dot+mx%22&amp;o=newest&amp;f=1">esteban at correo dot unam dot mx</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
From: esteban at correo dot unam dot mx
Operating system: linux
PHP version:  4CVS-2005-05-28 (stable)
PHP Bug Type: Compile Failure
Bug description:  cant cross compiling arm linux

Description:

Hi 
I try cross compiling php4 to run in a arm linux my configure line is: 

>CC="arm-linux-gcc" \
>CXX="arm-linux-g++" \
>RANLIB="arm-linux-ranlib" \
>LIBS="-L/opt/arcom/arm-linux/lib" \
>CFLAGS="-I/opt/arcom/arm-linux/include" \
>./configure \
>--prefix=/flashcard/usr/local/php-arm \
>--with-apxs=/www/bin/apxs \
>--host=arm-linux \
>--build=i386-linux 



Reproduce code:
---
Here's where the compile fails:

/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:240: error:
parse error before "one"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:241: error:
parse error before "IBM"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:247: error:
parse error before '}' token
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:247: warning:
data definition has no type or storage class
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c: In function
`ulp':
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:935: error:
parse error before "x"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:937: error:
parse error before "a"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:939: error: `x'
undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:939: error:
(Each undeclared identifier is reported only once
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:939: error: for
each function it appears in.)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:947: error: `a'
undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c: In function
`b2d':
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:977: error:
parse error before "d"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:995: error: `d'
undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c: In function
`d2b':
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1048: error:
parse error before "d"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1053: error: `d'
undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c: In function
`ratio':
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1179: error:
parse error before "da"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1182: error:
`da' undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1183: error:
`db' undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c: In function
`zend_strtod':
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1250: error:
parse error before "rv"
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1259: error:
`rv' undeclared (first use in this function)
/root/esteban/php4-STABLE-200505282035/Zend/zend_strtod.c:1492: error:
`rv0' undeclared (first use in this function)
make: *** [Zend/zend_strtod.lo] Error 1


Expected result:

Compile OK

Actual result:
--
Compile fails

-- 
Edit bug report at http://bugs.php.net/?id=33175&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33175&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33175&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33175&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33175&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33175&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33175&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33175&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33175&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33175&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33175&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33175&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33175&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33175&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33175&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33175&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33175&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33175&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33175&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33175&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33175&r=mysqlcfg

</pre></span>
</blockquote><br>

<h3><span class=subject><a href="/php-bugs@lists.php.net/msg65416.html">#33176 [NEW]: umask is not being restored when each request is finished</a></span></h3>
<div class="darkgray font13">
<span class="sender pipe">
<span class=date><a href="/search?l=php-bugs%40lists.php.net&amp;q=date:20050528&amp;o=newest&amp;f=1">2005-05-28</a></span></span>
<span class="sender pipe">
<span class=thead><a href="/search?l=php-bugs%40lists.php.net&amp;q=subject:%22%2333176+%5C%5BNEW%5C%5D%5C%3A+umask+is+not+being+restored+when+each+request+is+finished%22&amp;o=newest&amp;f=1">Thread</a></span></span>
<span class=name><a href="/search?l=php-bugs%40lists.php.net&amp;q=from:%22strovato+at+cdeducation+dot+org%22&amp;o=newest&amp;f=1">strovato at cdeducation dot org</a></span>
</div>
<blockquote><span class="msgFragment"><pre>
From: strovato at cdeducation dot org
Operating system: Solaris 10 SPARC
PHP version:  4.3.11
PHP Bug Type: iPlanet related
Bug description:  umask is not being restored when each request is finished

Description:

If the umask is set by a PHP script and not restored, the new umask
persists and is inherited by any scripts that follow.

This seems like the same bug as #28401, but under the Sun Java System Web
Server 6.1 instead of Apache.  It is marked there as Wont fix.  If it's
not fixable here, either, then perhaps the docs should be fixed, since
they state that "the umask is restored when each request is finished."

-S

Reproduce code:
---



Expected result:

Each time the script is run, it should echo the same number.

Actual result:
--
The new umask instead of the default will be echoed every time after the
first run.

-- 
Edit bug report at http://bugs.php.net/?id=33176&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=33176&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=33176&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=33176&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=33176&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=33176&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=33176&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=33176&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=33176&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=33176&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=33176&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=33176&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=33176&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=33176&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=33176&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=33176&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=33176&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=33176&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=33176&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=33176&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=33176&r=mysqlcfg

</pre></span>
</blockquote><br>
    <h2></h2>
  </div>
  <div class="aside" role="complementary">
    <div class="logo">
      <a href="/"><img src="/logo.png" width=247 height=88 alt="The Mail Archive"></a>
    </div>
    <h2>21 matches</h2>
    <br>
    
<ul><li><a href="/search?l=php-bugs%40lists.php.net&amp;q=date%3A20050528&amp;a=1&amp;f=1">Advanced search</a></li></ul>
<form class="overflow" action="/search" method="get">
<input type="hidden" name="l" value="php-bugs@lists.php.net">
<label class="hidden" for="q">Search the list</label>
<input class="submittext" type="text" id="q" name="q" placeholder="Search php-bugs" value="date:20050528">
<input class="submitbutton" id="submit" type="image" src="/submit.png" alt="Submit">
</form>

    
    <div class="nav margintop" id="nav" role="navigation">
      <h2 class="hidden">
                               Site Navigation
      </h2>
      <ul class="icons font16">
        <li class="icons-home"><a href="/">The Mail Archive home</a></li>
        <li class="icons-list">
          <a href="/php-bugs@lists.php.net" title="c" id="c">php-bugs - all messages</a></li>
        <li class="icons-about">
          <a href="/php-bugs@lists.php.net/info.html">php-bugs  - about the list</a></li>
        <li class="icons-expand"><a href="/search?l=php-bugs%40lists.php.net&amp;q=date%3A20050528" title="e" id="e">Expand</a></li>
      </ul>
    </div>

    <div class="listlogo margintopdouble">
      <h2 class="hidden">
  				Mail list logo
      </h2>
      
    </div>
  </div>
  <div class="footer" role="contentinfo">
    <h2 class="hidden">
	        	      Footer information
    </h2>
    <ul>
      <li><a href="/">The Mail Archive home</a></li>
      <li><a href="/faq.html#newlist">Add your mailing list</a></li>
      <li><a href="/faq.html">FAQ</a></li>
      <li><a href="/faq.html#support">Support</a></li>
      <li><a href="/faq.html#privacy">Privacy</a></li>
    </ul>
  </div>
<script language="javascript" type="text/javascript">
document.onkeydown = NavigateThrough;
function NavigateThrough (event)
{
  if (!document.getElementById) return;
  if (window.event) event = window.event;
  if (event.target.tagName == 'INPUT') return;
  if (event.ctrlKey || event.metaKey) return;
  var link = null;
  switch (event.keyCode ? event.keyCode : event.which ? event.which : null) {
    case 69:
      link = document.getElementById ('e');
      break;
    }
  if (link && link.href) document.location = link.href;
}
</script>
</body>
</html>